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20.  In  this  paper  a new  approach  is  taken  to  truth  maintenance  algorithms. 
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true,  false,  or  unknown.  The  relations  among  propositions  are  repre- 
sented in  disjunctive  clauses.  By  representing  an  implication  in  a 
clause  the  same  algorithm  that  is  used  to  deduce  its  consequent  can  be  used  to 
deduce  the  negation  of  antecedents  that  would  lead  to  contradictions.  A 
simple  approach  is  also  taken  to  the  handling  of  assumptions  and  backtracking 
which  does  ot  involve  the  non-monotonic  dependency  structures  present  in 
other  truth  maintenance  systems. 
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Abstract 

Truth  maintenance  systems  have  been  used  in  recently  developed 
problem  solving  systems.  A truth  maintenance  system  ( TMS ) 19  designed  to 

i be  used  by  deductive  systems  to  maintain  the  logical  relations  among  the 

beliefs  which  those  systems  manipulate.  These  relations  are  used  to 
incrementally  modify  the  belief  structure  when  premises  are  changed,  giving 
a more  flexible  context  mechanism  than  has  been  present  in  earlier 
artificial  intelligence  systems.  The  relations  among  beliefs  can  also  be 
used  to  directly  trace  the  source  of  contradictions  or  failures,  resulting 
in  far  more  efficient  backtracking. 

In  this  paper  a new  approach  is  taken  to  truth  maintenance 
algorithms.  Each  belief,  or  proposition,  can  be  in  any  one  of  three  truth 
9tates,  true,  false,  or  unknown.  The  relations  among  propositions  are 
represented  in  disjunctive  clauses.  By  representing  an  implication  in  a 
clause  the  same  algorithm  that  is  used  to  deduce  its  consequent  can  be  used 
to  deduce  the  negation  of  antecedents  that  would  lead  to  contradictions.  A 
simple  approach  is  also  taken  to  the  handling  of  assumptions  and 
' backtracking  which  does  not  involve  the  non-monotonic  dependency  structures 

present  in  other  truth  maintenance  systems. 
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Introduction 


Truth  maintenance  systems  have  been  used  in  recently  developed 
problem  solving  systems  [Stallman  and  Sussman  1 9761  [Ooyle  1978a) . A truth 
maintenance  system  (TflS)  is  a domain  independent  system  for  maintaining  the 
consistency  and  we  I I foundedness  of  a set  of  beliefs.  It  i s an  inherenlty 
propositional  mechanism  uhich  is  designed  to  be  used  by  deductive  systems 
to  maintain  the  logical  relations  between  the  propositions  they  generate. 
The  truth  maintenance  system  also  simulates  the  effects  of  those  relations 
to  the  extent  that  it  can  be  used  to  incrementally  modify  the  belief 
structure  and  retract  assumptions  when  they  lead  to  contradictions.  Thi3 
process  can  be  used  to  realize  substantial  search  efficiencies  in  that 
contradictions,  or  failures,  only  result  in  backtracking  over  relevant 
assumpt i ons. 

An  example  of  the  use  of  a TMS  would  be  an  algebraic  manipulator 
which  is  capable  of  using  piecewise  approximations  to  functions.  In  such  a 
manipulator  each  equation  is  considered  to  be  a proposition.  Uhen  the 
manipulation  of  some  set  of  equations  results  in  a new  equation,  the 
equations  used  are  recorded  in  the  TMS  as  supporting  the  newly  generated 
equation.  A piecewise  linear  approximation  to  a function  can  be 
represented  by  an  implication  between  equations  such  as  (>  x -.25)  n (<  x 
.25)  -*  ( = (sin  x)  x).  To  use  such  an  approximation  of  (sin  x)  the 
j manipulator  might  have  to  assume  that  x was  in  the  required  range.  If  at 

some  later  time  a value  for  x is  found  that  is  inconsistent  with  the 
assumptions,  then  the  manipulator  need  simply  announce  to  the  TflS  that  the 
two  conflicting  equations,  the  assumed  inequal  I i ty  and  the  found  value,  are 
mutually  contradictory.  The  TMS  will  then  retract  a relevant  assumption. 
In  such  cases  the  TMS  might  instead  be  made  to  state  all  the  assumptions 
upon  which  the  contradiction  depends  and  leave  the  choice  of  removal  up  to 
the  manipulator.  The  use  of  piecewise  linear  approximations  to  the 
behavior  of  transistors  is  one  of  the  applications  of  truth  maintenance 
used  by  Stallman  and  Sussman  in  electronic  circuit  analysis  (Staliman  and 
Sussman  13761 . 

In  addition  to  the  search  efficiencies  which  are  gained  in  dependency 
directed  backtracking,  the  recorded  relations  between  beliefs  can  be  used 
to  justify  or  explain  the  beliefs  of  the  deductive  system.  Such 
explanations  are  useful  in  understanding  and  verifying  the  results  of 
problem  solvers. 

This  paper  introduces  a new  approach  to  the  concepts  and  mechanisms 
of  truth  maintenance.  The  basic  idea  is  to  represent  all  logical  relations 
between  proposition  in  disjunctive  clauses.  For  example  implications  of 
the  form  PI  /\  P2  n P3  ...  -*  Q will  be  represented  as  -PI  v -P2  v -P3  ... 

v Q.  Notice  that  in  the  clause  representat i on  the  distinction  between 
antecedents  and  consequences  disappears  and  therefore  the  negation  of  an 
antecedent  in  the  implication  can  be  as  easily  deduced  as  the  consequent. 
This  feature  of  the  representation  eliminates  much  of  the  backtracking 
mechanisms  which  are  present  in  other  truth  maintenance  systems  [Stallman 
and  Sussman  19761  (Doyle  1978a).  Another  common  relation  among  propositions 
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we  wish  to  be  able  to  express  is  the  notion  that  some  set  of  them  are 
mutually  contradictory,  formally  — (PI  a P2  a P3  . . . a Pn)  . This  relation 
is  transformed  via  DeMorcjan’ s laws  into  the  clause  -’PI  v -P2  v -P3  ...  v 
-Pn.  This  again  eliminates  the  need  for  certain  backtracking  mechanisms 
present  in  other  systems. 

The  propositions  in  other  systems  have  only  two  truth  states  called 
"in"  and  "out",  which  represent  "known  to  be  true"  (a  well  founded  proof 
exists)  and  "not  known  to  be  true"  (not  in)  respectively.  fly  system  uses 
the  three  more  intuitive  truth  states  of  true,  false,  and  unknown  (hence 
the  title  of  this  paper).  This  eliminates  the  need  of  a separate  entity  to 
represent  the  negation  of  a proposition. 

The  notion  that  the  truth  of  some  proposition  is  an  assumption  is 
simply  represented  by  appropriately  tagging  the  proposition.  When  the 
assumption  is  found  to  lead  to  a contradiction  (a  clause  that  cannot  be 
satisfied)  the  truth  value  is  automatically  retracted.  I believe  that  this 
mechanism  has  most  of  the  non-monoton i c power  of  Doyle's  system,  but  in  a 
much  simpler  form  (see  (Doyle  1978a)  for  a discussion  of  non-mono t i n i c i ty)  . 

At  the  end  of  the  paper  are  a series  of  appendices  which  give  the 
details  of  the  implementation  and  an  overview  of  its  use. 
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The  Algorithm 

The  basic  truth  maintenance  system  ( T MS ) object  type9  are  literals  1 

(THS  nodes),  truth  values,  terms,  and  clauses.  TI1S  nodes  represent 
assertions  of  the  deductive  system  using  the  TNS.  Such  assertions  might  be 
of  the  form  (COLOR  A RED)  or  (MODE  TRANSISTOR-1  BETA-INFINITE),  but  their 
TMS  representation  is  simply  a unique  atom,  i.e.  a node.  Nodes  can  have 
three  possible  truth  states,  true,  false,  and  unknown.  A truth  value  i9  a 
true  or  false  value  of  a node.  Changing  a node  from  an  unknown  state  to 
either  true  or  false  will  be  referred  to  as  adding  a truth  value,  since  it 
is  conceptually  adding  information.  Changing  a node  from  true  or  false  to 
unknown  will  be  referred  to  as  removing  a truth  value,  as  it  is 
conceptually  removing  information.  A term  is  an  association  of  a node  with 
a value  and  is  true  when  the  node  ha9  that  value,  false  when  the  node  has 
the  opposite  value,  and  unknown  otherwise. 

The  relations  between  the  truth  values  of  the  nodes  are  represented 
by  propositional  formulas  in  conjunctive  normal  form.  This  means  that 

there  is  a set  of  disjunctive  clauses  which  must  all  be  satisfied  by  the 

values  of  the  nodes.  Each  clause  contains  a set  of  terms,  one  of  which 
must  be  true. 

Justifications  for  assertions  are  represented  as  clauses.  For 
example,  if  an  assertion  represented  by  the  node  C was  implied  by 
assertions  represented  by  A and  B,  then  the  clause  would  be  ((A. false)  or 
(B. false)  or  (C. true) ) . The  fact  that  some  set  of  assertions  are  mutually 
contradictory  is  also  represented  in  a clause.  For  example,  if  assertions 
represented  by  A,B,  and  C would  lead  to  a contradiction,  then  the  clause 
would  be  ((A. false)  or  (B. false)  or  (C. false)). 

Each  clause  can  be  given  multiple  interpretations.  For  example  the 
clause  ((A. false)  or  <C. false)  or  ID. true)  I might  be  thought  of  as  (A  and 

C)  ->  D,  or  it  could  be  thought  of  as  (-0  and  C)  ->  -■A.  Th'19  clause  can 

also  be  thought  of  expressing  the  fact  that  a contradiction  results  from  A, 

C.  and  --  D all  being  true  simultaneously.  Even  more  bizarre 
conceptualizations  of  the  clause  are  possible,  such  as  (A  ->  (-0  ->  --C)). 
Interpretations  of  the  last  type  are  useful  in  understanding  certain 
backtracking  techniques  to  be  discussed  later. 

Adding  Clauses  and  Truth  Values 

Clauses  can  be  directly  added  to  system  at  any  time  by  a top  level 
procedure  and  are  instantly  checked  for  possible  deductions.  Truth  values 
can  be  added  in  two  ways.  The  simplest  is  to  add  a truth  value  for  a node 
as  a premise.  In  this  case  no  other  reason  for  believing  the  value  is 
needed.  The  second  way  is  to  deduce  a truth  value  from  a clause.  Suppose 
all  the  terms  of  a clause  are  known  to  be  false  with  one  exception,  which 
is  a node  whose  truth  value  is  unknown.  In  this  case  the  one  remaining 
node  can  have  the  appropriate  truth  value  added  to  satisfy  the  clause. 

This  is  the  only  way  truth  values  are  deduced  from  the  clauses  in  the  TMS. 

There  are  however  valid  deductions  which  depend  on  more  than  one  clause. 

For  example  given  the  two  clauses  A ->  B and  -A  ->  B it  is  possible  to 
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deduce  8.  Such  deductions  are  only  made  indirectly  when  certain  types  of 
contradictions  arise  Icon  trad i c t i ons  will  be  discussed  in  later  sections). 

Uhen  a truth  value  is  added  a check  must  be  made  to  see  if  new  truth 
values  can  be  deduced  from  the  added  information.  This  is  done  by 
examining  clauses  which  contain  the  term  whose  truth  value  has  been  added. 
Since  clauses  which  contain  the  term  which  is  made  true  are  automatically 
satisfied,  the  only  clauses  that  must  be  checked  for  possible  deductions 
are  those  that  contain  the  term  which  is  made  false.  Since  truth  values 
are  added  recursively,  all  truth  values  that  can  be  deduced  via  chains  of 
such  one-step  clause  deductions  are  added. 

For  reading  the  following  code  it  will  be  useful  to  refer  to  Appendix 
II  in  which  the  data  structures  are  explained.  The  code  presented  below  is 
a slight  simplification  of  the  actual  code  used  here  only  to  formalize  the 
algorithm  as  described  so  far.  It  does  not  contain  the  mechanisms  for 
handling  contradictions  which  will  be  explained  later.  The  complete  code 
is  given  in  Appendix  III. 

(OEFUN  SET-TRUTH  (NODE  VRl  UE  SUPPORT  I 

; SUPPORT  IS  EITHER  THE  ATOM  ’PREfllSE  OR 

(R  CLAUSE  UHICH  IS  BEING  USED  TO  DEDUCE  VALUE 

(PROG  (> 

(CONO  ((NOT  (EQ  (GET  NODE  ’TRUTH)  ’UNKNOUN)) 

(ERROR  ’SET-TRUTH--VALUE-NOT-UN):NOUN  N00E>)> 

(PUTPROP  NOOE  VALUE  ’TRUTH) 

(PUTPROP  NODE  SUPPORT  ’SUPPORT) 

jFOR  EACH  CLAUSE  UHICH  CONTAINS  THE  TERfl  UHICH  BECOflES  FALSE 
(SUBTRACT  ONE  FR0H  THE  NUMBER  OF  TERMS  UHICH  CAN  POTENTIALLY  SATISFY  IT. 

(HAPC  (FUNCTION  (LAMBDA  (CLAUSE) 

(PUTPROP  CLAUSE  (1-  (GET  CLAUSE  ’PSRTI)  ’PSAT>>> 

(GET  NOOE  (GET  VALUE  ’OP-CLAUSES))) 

(I1APC  (FUNCTION  OEOUCE-CHECK) 

(GET  NOOC  (GET  VALUE  ’OP-CLAUSES))))) 

(OEFUN  OEOUCE -CHECH  (CLAUSE) 

(PROG  (F) 

(CONO  ((AND  (.  (GET  CLAUSE  ’PSAT)  1) 

(SETO  F (PCONSEQ  CLAUSE))) 

(SET-TRUTH  (CAR  F)  (COR  F)  CLAUSE))))) 

(PCONSEQ  FINOS  A NOOE  IN  THE  CLAUSE  UHICH  HAS  A TRUTH  STATE 
(OF  UNI" NOUN  ANO  RETURNS  A 00TTE0  PAIR  OF  THE  NOOE  AND  THE 
(VALUE  UHICH  THE  NOOE  OUST  HAVE  TO  SATISFY  THE  CLAUSE. 

It  would  be  possible  to  check  for  more  complex  deductions.  For 
example  if  there  are  two  clauses  (P  or  Q)  and  (P  or  -0)  it  is  valid  to 
deduce  P.  In  general,  arbitrary  deductions  could  be  done  by  deciding 
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whether  the  addition  of  some  truth  value  inevitably  leads  to  a 
contradiction.  if  this  is  indeed  the  case  then  the  opposite  truth 
value  could  be  deduced.  The  problem  with  this  seemingly 
straightforward  approach  is  in  deciding  if  something  must  lead  to  a 
contradiction.  A contradiction  is  inevitable  when  the  set  of  clauses 
can  not  be  satisfied  by  any  truth  values  for  the  nodes  which  are 
unknown.  Therefore  in  order  to  decide  if  a contradict  ion  is  inevitable 
the  system  must  decide  if  the  set  of  clauses  can  be  satisfied  by  the 
remaining  unknown  nodes.  This  is  a standard  problem  of  propositional 
logic  and  is  known  to  be  NP  complete.  This  means  that  there  are  strong 
suspicions  that  it  must  require  exponential  time  to  solve.  Therefore, 
in  order  to  avoid  such  a combinatorial  explosion  1 restrict  myself  to 
one  clause  deductions.  This  still  gives  all  of  the  intuitive  deductive 
power  of  a clause  while  preserving  computational  expedience. 


Removing  Truth  Values 

Truth  values  can  be  removed  as  well  as  added.  This  can  happen 
when  the  user  of  the  THS  decides  that  a premise  is  no  longer  known,  or 
it  can  happen  when  assumptions  are  retracted  in  backtracking.  Uhen 
this  happens  it  is  necessary  to  remove  all  truth  values  that  critically 
depend  on  the  lost  information.  Truth  values  are  used  for  deductions 
only  by  clauses  that  contain  the  term  they  make  false.  Therefore 
clauses  which  contain  the  term  which  was  previous. y false,  but  is  now 
unknown,  are  examined.  If  any  of  these  clauses  were  used  in  the 
original  deduction  of  some  truth  value,  then  the  value  deduced  is  a 
candidate  for  removal. 

In  order  to  determine  whether  a clause  was  the  one  originally 
used  to  deduce  a truth  value,  each  node  has  associated  with  it  a 
support.  The  support  is  only  used  when  the  node  has  a known  truth 
value,  and  is  either  a premise  marker  or  the  clause  which  was  used  in 
the  original  deduction  of  the  truth  value.  Since  the  support  is  always 
assigned  when  a truth  value  is  added,  the  truth  values  of  the  other 
nodes  in  the  support  can  in  no  way  depend  on  the  supported  value.  This 
means  that  the  support  is  well  founded  and  the  set  of  premises  that  a 
truth  value  is  deduced  from  can  always  be  determined  by  tracing 
supports  without  fear  of  loops. 

Care  must  be  taken  that  values  are  not  removed  that  can  be 
deduced  in  other  ways.  One  attempt  at  solving  thi9  problem  is  to  check 
all  clauses  that  contain  the  node  whose  value  is  being  considered  for 
removal  to  see  if  any  can  be  used  to  deduce  the  value.  However  the 
following  example  demonstrates  the  problem  with  this  approach. 
Consider  the  clauses: 
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A ->  B 
B ->  C 
C ->  B 

Suppose  that  A was  added  as  a premise  and  then  later  removed. 
Now  when  A i.s  removed  there  19  still  a clause,  C ->  B,  that  can  be  used 
to  deduce  B.  The  problem  with  using  this  clause  to  support  the  truth  of 
B is  that,  since  C depend  on  B,  B would  be  used  to  support  itself.  The 
solution  to  this  problem  is  to  first  recursively  remove  all  candirlates 
for  removal  (therefore  removing  all  truth  values  that  critically  depend 
on  them).  After  this  has  been  done  clauses  which  contain  the  terms 
whose  values  have  been  removed  can  be  checked  for  deductions.  If 
contradictions  are  present  in  the  system,  then  it  is  possible  that  when 
a truth  value  is  removed  its  opposite  value  can  then  he  deduced 
(contradictions  will  be  discussed  in  more  detail  a little  later). 
Whenever  a clause  is  used  to  deduce  a truth  value,  the  clause  becomes 
the  support  for  the  value.  Again  since  the  support  is  found  before  the 
truth  value  is  added,  it  must  be  well  founded.  An  important  point  is 
that  if  a premise  is  removed  by  the  TfIS  user,  but  the  removed  truth 
value  can  be  deduced  from  other  premises  in  the  system,  then  the  truth 
value  remains,  with  a clause  as  its  support  instead  of  the  premise 
marker . 

In  reading  the  following  code  it  will  again  be  helpful  to  refer 
to  Appendix  II  in  which  the  data  structures  are  explained.  The  code 
presented  here  is  a simplification  of  the  actual  code  used  only  to 
formalize  the  algorithm  39  discussed  so  far,  i.e.  it  does  not  deal  with 
contradictions  and  assumptions  which  will  be  discussed  later.  The 
complete  code  is  presented  in  Appendix  III. 
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(OEFUN  REMOVE-TRUTH  (NODE! 

(PROC  (VRLUE ) 

(SETQ  VRLUE  (CEI  NODE  ’TRUTH)) 

(CONO  MEQ  VRLUE  ’UNKNOWN) 

(ERROR  ' RE HOVE -TRUTH — VALUE-NOT-PRESENT  NOOE ) ) ) 

(PUTPROP  NOOE  ’UNI-NOUN  ’TRUTH) 

(PUTPROP  NODE  NIL  ’SUPPORT) 

;FOR  EACH  CLAUSE  UH1CH  CONTAINS  THE  TERn  WHICH  WAS  FALSE 
; ADO  ONE  TO  THE  NUMBER  OF  TERMS  WHICH  CAN  POTENTIALLY  SATISFY  IT 

(MAPC  (FUNCTION  (LAMBDA  (CLAUSE) 

(PUTPROP  CLRUSE  ’PSAT  (1«  (GET  CLAUSE  ’PSAT)))  )> 

(GET  NODE  (GET  VALUE  ’OP-CLAUSES))) 

;REMOVE  TRUTH  VALUES  WHICH  THESE  CLAUSES  HAO  BEEN  USEO  TO  OEOUCE 

(MAPC  (FUNCTION  (LAMBDA  (CLAUSE) 

(PROG  (F) 

(CONO  ((AND  (>  (GET  CLAUSE  ’PSAT)  1) 

(SETQ  F (CAR  (CONSEQ  CLAUSE))) 

jCONSEQ  FINDS  A NOOE  WHICH  SATISFIES  THE  CLAUSE. 
(EQ  CLAUSE  (GET  F ’SUPPORT))) 

(REMOVE-TRUTH  F))>>>> 

(GET  NOOE  (GET  VALUE  ’OP-CLAUSES))) 

; CHECK  FOR  ANY  POSSIBLE  OEOUCTIONS  OF  VALUES  FOR  THE 
;NODE  WHOSE  VALUE  WAS  REMOVEO 

(MAPC  (FUNCTION  DEDUCE -CHECK)  (GET  NOOE  ’POS-CLAUSES) ) 

(MAPC  (FUNCTION  OEOUCE-CHECK)  (GET  NOOE  ’NEG-CLAUSES) ) I) 


Contradictions 

Consider  a case  in  which  a clause  is  added  that  contains  only 
terms  which  are  false.  The  clause  is  in  contradiction  uith  the  rest  of 
the  data  base  and  is  therefore  referred  to  as  a contradiction.  Since  a 
clause  is  a contradiction  only  when  all  of  the  terms  in  it  are  false,  a 
contradiction  is  said  to  depend  on  the  truth  values  of  the  terms  in  it. 
It  is  conceivable  that  a TUS  data  base  could  contain  several  such 
contradict  ions. 

The  addition  of  clauses  is  not  the  only  way  that  contradict  ions 
can  occur.  Consider  the  two  implications  (P  -•  Q)  and  IP  -*  -4D)  . If  no 
truth  values  are  known  for  P or  Q,  then  no  deductions  are  made  since 
each  clause  has  two  ways  in  which  it  might  be  satisfied.  If  a true 
value  for  P is  determined,  then  one  of  the  above  clauses  would  be  used 
to  deduce  a truth  value  for  0,  while  the  other  clause  would  become  a 
contradiction.  It  is  important  to  realize  that  in  cases  where  both  a 
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truth  value  and  its  negation  can  he  proven,  one  of  the  truth  values  is 
chosen  and  all  clauses  which  could  have  implied  its  negation  hecome 
contradictions.  Uhen  adding  a truth  value  leads  to  a contradiction,  it 
is  possible  to  add  new  clauses  that  allow  deductions  based  upon  this 
fact.  In  the  above  example  the  clause  ( -f  ) can  be  deduced  from  the 
two  original  clauses.  To  get  a better  feel  for  the  general  case 
consider  the  example: 

clause  interpretation 

{ (A.  true  MB.  false  MC.  true) ) HA  a B ) ->  C 

UC. false  HD. false  HE. true))  (C  n D)  -♦  E 

HA.  trueMF.  fa  I seME.  f al  se) ) (-'A  n F)  -*  -£ 

known  values 

B true 

D true 

F true 

Now  in  this  case  if  a false  value  for  A is  added  the  first  clause 
can  be  used  to  deduce  C.  Then  the  second  clause  can  be  used  to  deduce 
E.  At  this  point  however  the  third  clause  has  become  a contradiction. 
The  relationship  between  the  three  clauses  is  shown  in  figure  one.  In 
the  figure  each  clause  is  represented  by  a pair  of  right  angled 
implication  pointers  which  should  be  interpreted  as  B -*  HA  -•  C)  . The 
new  clause  which  can  he  added  in  this  situation  is  IB  n D n F)  -*  A 

To  see  how  new  clauses  can  be  constructed  from  the  appearance  of 
contradictions  in  general  it  is  necessary  to  closely  examine  how 
contradictions  result  from  the  addition  of  truth  values.  At  some  point 
a truth  value  is  added  which  removes  the  last  chance  of  satisfying  some 
clause,  say  Cl.  The  term  that  became  true  when  this  value  was  added 
will  be  called  FI  (E  in  the  above  example).  At  the  instant  before  this 
truth  value  is  added  Cl  could  have  been  used  to  deduce  the  opposite 
value.  In  a quiescent  data  base  no  such  clause  can  exist  since  al  I 
possible  one  step  deductions  are  made.  This  means  that  a false  truth 
value  was  added  for  some  term  in  Cl  (A  in  the  above  example),  but  that 
Cl  became  a contradiction  before  it  could  be  checked  for  deductions. 
This  second  term  will  be  called  F2.  All  possible  deduct  ion*,  from  the 
addition  of  any  truth  value  are  made  when  the  value  is  addeo,  and  Cl 
could  potentially  have  been  used  to  deduce  ->F  1 upon  the  addition  of 
-F2.  Therefore  the  truth  value  of  FI,  which  caused  Cl  to  be  a 
contradiction,  must  also  be  a deduction  from  -F2.  This  situation  is 
pictured  in  figure  two. 

In  the  figure  each  pair  of  right  angled  implication  pointers 
represents  a clause.  The  clauses  should  be  interpreted  as  ((F^j  n 
C 1 

F 2 * • • • I ->  ( -F2  ->  — F 1 ) ) . Now  if  all  the  involved  clauses 
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F i gure  1 . 

An  example  of  clause  formation  as  a result  of  a contradiction.  The 
addition  of-*A  causes  C3  to  become  a contradiction 
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( A (F,c\fxcX«.  ) A , r • ) FZ 

Figure  2. 

The  general  case  of  clause  formation  resulting  from  a 
contradiction.  This  i9  the  general  case  in  which  the  addition  of-»F2  causes 
Cl  to  become  a contradiction. 
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contained  only  tuo  terms,  then  the  clause  ( F2  ) could  lie  added. 
However,  in  the  general  case  the  contradiction  results  only  when  the 
peripheral  terms  are  true.  In  other  words  (F^j  a F^^  * ••• 
r7 

F 2 A ....)  ->  F2.  This  implication  then  is  the  clause  which  is 

added.  The  clause  is  formed  during  the  unrolling  of  the  recursive 
calls  to  the  procedure  for  adding  truth  values. 

Hopefully  the  added  clause  will  allow  the  deduction  of  the 
negation  of  the  truth  value  that  lead  to  the  contrd i c t i on,  -4-2  above, 
in  those  cases  when  it  would  again  lead  to  the  same  contradict  ion. 
Uhile  the  added  clause  is  always  valid,  it  does  not  always  produce  thi3 
desired  result.  The  reason  for  this  is  that  some  of  the  peripheral 
truth  values  might  also  he  deductions  from  the  added  value.  In  this 
case  when  the  added  value  (call  it  -4-2  as  above)  is  retracted,  some  of 
the  peripheral  values  will  also  disappear  and  its  negation  will  not  be 
deducible.  However  if  --F2  is  again  added  then  the  clause  generated 
above  will  become  a contradiction  at  the  point  at  which  all  the 
peripheral  values  become  true.  This  will  lead  to  the  generation  of  yet 
another  clause.  If  F2  is  still  not  deducible  upon  the  retraction  of 
-F2,  then  further  additions  of  ^F2  will  generate  still  more  clauses. 
It  is  always  possible  to  force  the  system  to  deduce  the  negation  of  a 
truth  value  that  leads  to  a contradiction  by  such  "pulsing"  of  that 
value.  I would  like  to  emphasize  that  it  would  require  a quite  complex 
structure  to  require  more  than  one  or  two  such  "pulses". 


Default  Values  and  Backtracking 

In  many  problem  solving  situations  it  is  necessary  to  make 
assumptions  that  have  no  solid  reason  for  belief.  If  such  assumptions 
lead  to  contradictions  then  they  should  be  retracted.  Assumptions  are 
represented  as  a subset  of  the  premise  values  called  default  values  and 
are  marked  in  the  implementation  by  having  the  atom  ’default  as  their 
support.  Uhenever  a node  is  given  a default  support  the  value 
supported  is  placed  under  a default  property  of  the  node.  This  value 
is  then  added  whenever  no  other  truth  value  for  the  node  can  be 
deduced. 

Uhen  a contradiction  is  present  in  the  data  base  an  attempt  is 
made  to  remove  it  by  removing  default  truth  values.  This  involves 
tracing  the  dependency  relations  (via  the  supports  associated  with 
nodes)  to  find  the  premises  upon  which  the  contradiction  depends  and  is 
therefore  called  dependency  directed  backtracking.  Uhen  a default 
value  is  found  upon  which  the  contradiction  depends,  it  is  removed. 
Hopefully  the  contradiction  becomes  an  implication  and  can  then  be  used 
to  deduce  the  opposite  of  the  default  value  removed.  If  the  opposite 
of  the  default  is  not  deduced,  then  the  default  value  is  added  back. 
At  this  point,  since  the  contradiction  must  reappear,  the  backtracking 
repeats  and  again  the  default  value  is  removed.  Due  to  the  new  clauses 
generated  each  time  the  contradiction  appears,  the  negation  of  the 
default  value  must  become  deducible,  and  the  backtracking  halts  when 
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either  no  contradictions  are  left,  or  the  contradictions  that  are 
present  do  not  depend  on  any  default  values. 


Clause  Values  and  Hierarchies  of  Assumptions 

So  far  there  has  been  no  mention  of  the  removal  of  clauses  from 
the  data  base.  While  the  physical  removal  of  clauses  does  not  occur, 
there  is  a mechanism  for  making  them  impotent.  This  is  done  by  add  i ng 
a node  to  each  clause  which  represents  its  validity.  For  example  the 
clause  (A  or  B)  might  become  (->C1  or  A or  B)  where  Cl  represents  the 
validity  of  the  clause.  Now  as  long  as  Cl  is  true  the  clause  acts  as 
expected,  but  if  the  truth  value  Cl  is  removed,  then  the  clause  is 
effectively  removed.  Each  time  a clause  is  added,  some  reason  is  given 
for  believing  it.  This  reason  is  used  as  the  support  for  the  truth  of 
the  node  which  represents  the  clause.  This  is  usually  useful  only  as  a 
device  for  keeping  track  of  the  source  of  clauses  for  the  TMS  user. 
However  it  has  one  very  important  use  in  allowing  assumptions  to  have 
l antecedents. 

Suppose  that  in  reasoning  about  animals  it  is  first  assumed  that 
they  are  mammals.  Furthermore  suppose  that  in  reasoning  about  mammals 
it  is  assumed  that  they  are  dogs.  The  assumption  that  some  animal  is  a 
dog  might  depend  on  the  assumption  that  it  is  a mammal.  In  general 
then  assumptions  must  be.  able  to  take  antecedents,  some  of  which  might 
be  other  assumptions.  Dependencies  of  this  form  can  be  represented  in 
the  TNS  by  a clause  whose  clause  node  has  a default  support.  In  the 
example  let  the  mammal  assumption  be  represented  by  A1  and  the  dog 
assumption  by  A2.  Now  A1  can  be  assumed  (given  a true  default  value). 
Once  this  has  been  done  A2  can  be  added  by  adding  the  clause  ( A 1 ->  A2) 
and  giving  the  clause  node  a true  default  value.  The  clause  allows  the 
deduction  of  A2  only  if  A1  is  believed,  also  A2  can  be  removed  as  an 
assumption  during  backtracking  by  removing  the  default  truth  value  of 
the  added  clause. 

Since  clause  nodes  are  no  different  than  any  other  nodes,  removal 
of  their  default  truth  values  could  be  taken  care  of  by  the 
backtracking  algorithm  already  described.  However,  in  backtracking  it 
is  desirable  to  remove  first  assumptions  upon  which  no  other 
assumptions  depend.  In  chess  for  example  one  normally  considers 
several  responses  to  a uen  move  before  going  on  to  the  next  move. 
This  helps  prevent  the  thrashing  involved  in  removing  and  adding  many 
assumptions  at  once. 

A minor  modification  to  the  backtracking  algorithm  allows  this 
selection  of  the  default  values.  The  number  of  supporting  clauses  that 
must  be  traced  back  from  the  contradiction  to  find  a premise  are 
counted.  There  may  be  severa1  paths  of  supports  that  lead  to  a given 
premise,  and  in  this  case  the  maximum  distance  is  used.  Now  if  3ome 
default  value  implies  some  other  assumption,  then  it  will  always  appear 
at  a greater  distance  from  the  contradict  ion  than  the  assumption  it 
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Comparison  with  Other  Work 

There  are  several  systems  which  use  explicit  justifications  for 
be  I iefs.  The  work  which  is  most  closely  related  to  the  TMS  presented 
here  is  that  of  Stallman  and  Sussman  [Stallman  and  Sussman  19761  and 
Doyle  [Doyle  1978al . The  basic  difference  between  these  systems  and  my 
T MS  is  in  the  mechanisms  used  for  dependency  directed  backtracking.  In 
both  of  these  systems  each  assertion  has  only  two  truth  states, 
believed  and  unknown,  called  "in"  and  "out"  respectively.  Since  no 
assertion  can  be  false  in  such  a system,  additional  mechanisms  are 
needed  to  prevent  the  belief  of  sets  of  assumptions  known  to  be 
contradictory.  In  Stallman  and  Sussman’s  ARS  system  the  assumptions 
underlying  a contradiction  are  placed  in  a NOGOOD  assertion.  This  is 
used  by  additional  mechanisms  which  prevent  the  set  of  assumptions  from 
be i ng  be  I i eved. 

Jon  Doyle  has  completed  a master’s  thesis  on  the  implementation 
of  a general  purpose  truth  maintenance  system  (TMS)  [Doyle  1978al . His 
TMS  employs  the  notions  of  "in"  and  "out"  to  represent  the  truth  values 
of  assertions.  If  an  assertion  is  believed  by  the  system  then  its  TMS 
node  is  "in".  If  the  assertion  is  not  believed,  i.e.  either  known  to 
be  false  or  simply  unknown,  then  its  TMS  node  is  "out".  To  make  a 
distinction  between  simply  not  knowing  something’s  truth  value  and 
knowing  that  it  is  false,  two  TMS  nodes  are  required,  one  for  the 
assertion  and  one  for  its  negation.  If  the  assertion  has  an  unknown 
truth  value,  then  both  nodes  are  "out".  If  the  truth  value  is  known 
then  one  of  the  nodes  is  "in"  and  the  other  is  "out".  An  important 
point  is  that  in  Doyles  system  the  notion  of  a contradiction  is 
completely  seperate  from  the  justifications.  A node  must  be  created 
which  is  declared  to  be  a contradiction  and  then  a jus t i f i ca t i on  of 
this  contradiction  node  is  installed  for  each  set  of  nodes  which  are 
mutaully  con t r ad i c t or y.  Specifically  a contrdiction  node  must  be 
implied  by  each  pair  of  nodes  representing  an  assertion  and  its 
negation.  If  this  is  not  done  then  the  system  will  have  no  problem 
with  keeping  both  of  these  nodes  in,  in  other  words  believing  both  an 
assertion  and  its  negation. 

In  Doyle's  system  a mechanism  of  major  importance  in  backtracking 
is  conditional  proof.  A conditional  proof  can  be  thought  of  as  a TMS 
node  which  is  true  whenever  a certain  implication  among  other  TMS  nodes 
is  true.  Therefore  a conditional  proof  is  defined  in  terms  of  the 
implication  it  represents,  in  other  words  as  a set  of  antecedents  and  a 
consequent.  To  take  an  example  suppose  that  the  implication  AaBaC  -*  D 
is  present  in  some  TMS.  A conditional  proof  node  of  D with  respect  to 
A and  B would  represent  the  truth  of  the  implication  AaB  -*  D.  Now  if  C 
were  known  to  be  true  then  the  implication  represented  by  the 
conditional  proof  would  be  true  and  therefore  also  the  "CP"  node.  This 
can  be  stated  more  formally  as  C -*  (AaB  -*  D) . 

Doyle’s  TMS  uses  unidirectional  justifications  to  keep  track  of 
consequences  and  antecedents  of  beliefs.  To  achieve  dependency 
directed  backtracking  in  such  systems  it  is  necessary  to  trace  the 
antecedents  of  a failure  (or  contradiction)  and  then  to  blame  the 
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contradiction  on  some  set  of  assumptions.  Once  this  is  done  it  is  also 
necessary  to  add  implications  for  the  neyation9  of  each  assumption  to 
prevent  the  set  of  assumptions  from  being  again  believed  at  some  later 
time. 

Doyle’s  TMS  also  uses  a non-monotonic  dependency  structure.  1 h i s 
means  that  truth  of  a node  can  depend  on  another  node  being  unknown. 
In  such  cases  whenever  the  unknown,  i.e.  "out",  node  becomes  known, 
i.e."in",  the  dependant  node  becomes  "out".  Whenever  an  assumption  13 
made,  an  node  representing  its  negation  is  created.  The  assumption  is 
then  made  to  depend  on  i t s negation  being  unknown.  This  can  tie 
understood  as  expressing  the  notion  ”1  will  believe  it  t o be  true  as 
long  as  I cannot  prove  that  it  is  false".  Uhen  a contradiction  is 
found  which  depends  on  some  set  of  assumptions  a conditional  proof  is 
constructed  for  each  assumption  representing  the  implication  of  the 
contradiction  by  the  assumption.  This  conditional  proof  is  then  used 
to  imply  the  negation  of  each  assumption  when  that  assumption  would 
lead  to  the  contradiction.  Since  an  assumption  depends  on  its  negation 
being  "out",  when  the  negation  becomes  "in" .the  assumption  becomes 
"out". 

The  implementation  of  the  conditional  proof,  mechanism  is  however 
not  complete.  Jf  the  antecedants  of  the  implication  a conditional 
proof  represents  are  not  "in",  then  it  is  extremely  difficult  and 
computational  expensive  to  check  the  actual  truth  value  of  the 
conditional  proof.  Doyle’s  T MS  "CP"  nodes  are  "in"  in  only  a subset  of 
the  cases  in  which  they  could  actually  be  shown  true.  For  example  the 
conditional  proofs  which  result  from  a contradiction  are  each 
associated  with  the  set  of  assumptions  upon  which  that  contradiction 
was  blamed.  The  negation  of  one  of  these  assumptions  is  only  justified 
when  all  the  other  assumptions  in  that  specific  set  are  believed. 
Therefore  the  conditional  proof  will  not  justify  the  negation  of  an 
assumption  when  the  assumption  can  combine  with  other  information  to 
give  the  contradiction.  New  assumptions  which  lead  to  old 
contradictions  are  also  not  prevented  from  being  believed.  Fly  using 
the  contradiction  itself  as  an  active  deductive  agent,  my  1I1S  can  make 
such  deductions  and  avoid  backtracking  entirely  in  many  3uch 
s i tuat i ons. 

In  my  TMS  a con tr ad i c t i on  is  only  a clause  which  cannot  be 
satisfied.  Therefore,  if  a truth  value  of  one  of  the  nodes  in  the 
clause  is  removed,  the  clause  will  be  used  to  deduce  the  opposite  truth 
value  for  this  node.  This  allows  the  direct  deduction  of  false  values 
for  assumptions  which  would  lead  to  contradictions.  The  main  advantage 
of  this  system  is  the  tremendous  conceptual  and  programming  simplicity 
achieved.  However  it  is  more  than  just  a simplified  implementation  of 
the  previous  systems.  Because  no  specific  set  of  assumptions  is  chosen 
upon  which  to  blame  a contradiction,  new  assumptions  which  would  lead 
to  the  contrad i c t i on  can  also  be  proven  false.  However  the  difference 
this  makes  in  the  number  of  contradictions  encountered  is  smal  I 
compared  to  the  savings  given  by  any  form  of  dependency  directed 
hack  track ing. 

I have  not  implemented  any  conditional  proof  mechanism  for  the 
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simple  reason  that  I did  not  have  any  application  to  justify  its 
existence.  Doyle’s  TMS  uses  conditional  proof  to  implement  a mechanism 
for  levels  of  abstraction.  This  is  useful  in  condensing  explanations 
of  beliefs.  The  exploration  of  such  uses  of  conditional  proof  and  its 
relation  to  the  algorithms  presented  here  would  be  an  interesting  topic 
for  further  research.  Also  there  are  probably  uses  for  the  non- 
monotonic dependency  structure  present  in  Doyle’s  TMS  other  than  the 
identification  of  assumptions.  The  incorporation  of  such  mechanisms 
into  this  algorithm  and  the  investigation  of  more  sophisticated 
applications  would  also  be  worthwhile. 
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Appendix  I — A User’s  Guide 

i 

This  is  a summary  of  the  top  level  procedures  which  can  be  used  I . 

to  interface  the  TMS  with  any  deductive  system.  The  procedures 
descibed  here  can  be  loaned  into  lisp  on  MIT  —A I by  evaluating  (F ASLOAD 
TMS  FASL  DSK  DAM) . 

(TMS-INI T)  1 , 

This  procedure  initializes  the  TMS  data  structures. 

(MAKE-DEPENDENCY-NOOE  <assertion>  <when-true>  <when-false>  <when-unknown> ) 

This  procedure  creates  arid  returns  a new  TMS  node  to  represent 
the  assertion  which  is  passed  as  an  argument.  The  node  returned  is  an 
atom  which  has  the  assertion  placed  on  its  ’ASSERTION  property.  <when-  i 

true>  is  a function  to  be  applied  to  the  assertion  when  the  node 
becomes  true.  <when-false>  and  <uhen-unknoun>  are  similarly  functions 
to  be  used  when  the  node  becomes  false  and  unknown  respectively.  Any 
of  the  three  function  arguments  can  also  be  nil  in  which  case  no  action  j 

is  taken  upon  the  correspoding  transition  of  truth  state. 

The  truth  state  of  the  node  is  available  as  its  ’TRUTH  property 
which  is  either  'TRUE,  ’FALSE,  or  ’UNKNOWN.  The  node  is  initially 
assumed  unknown  and  must  be  forced  true  via  either  SET-TRUTH  or  the 
addition  of  a clause  which  causes  its  deduction.  <when-true>  will  be 
applied  when  this  happens.  The  node  can  never  go  directly  from  being 
true  to  being  false,  or  vice-versa,  it  must  first  pass  through  a state 
of  being  unknown  and  therefore  an  application  of  <when-unknown>. 

| 

(SET-TRUTH  <node>  <value>  <reason>) 

This  procedure  adds  truth  values.  The  first  argument  must  be  a 
TMS  node  and  the  value  must  be  either  ’true  or  ’false.  An  error 
results  if  the  node  does  not  have  an  initial  truth  state  of  unknown. 

<reason>  should  be  a representation  of  the  reason  for  believing  the 
truth  value  and,  except  for  the  special  atom  ’DEFAULT  described  below, 
is  not  used  by  the  TMS  other  than  placing  it  on  the  'EXPLANATION 
property  of  the  node  for  the  convenience  of  the  TMS  user.  All  truth 
■ values  which  are  given  via  an  external  call  to  this  procedure  are 
considered  premises  by  the  TMS  and  their  ’SUPPORT  property  is  the  atom 
’PREMISE. 

An  internal  form  of  this  procedure  is  used  to  add  truth  values 
deduced  from  clauses.  In  this  case  the  support  is  a clause.  All  truth 
values  that  can  be  deduced  in  one  step  clause  deductions  from  any  added 
truth  values  are  also  added.  If  a contradiction  results  from  the 
addition  of  a truth  value,  a new  clause  is  generated  and  added  as 
described  in  the  section  on  contradictions 

[ 1 
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(ADD-CLAUSE  <clause>  <reason>) 

This  procedure  adds  a clause  to  the  TMS  data  base.  The  clause 
argument  must  be  a list  of  dotted  pairs.  Each  pair  is  a TMS  node 
dotted  with  either  'true  or  ’false  to  represent  the  node  or  its 
negation  respectively.  For  example: 

(SETQ  A (MAKE -DEPENDENCY -NODE  ’HUH AN -TURING  nil  nil  nil)) 

(SETO  B (hAKE-DEPENDENCY-NODE  ’FALLABLE-TURING  nil  nil  nil)) 

(AOO-CLAUSE  (list  (cons  A 'false  ) (cons  B ’true))  ' HUMAN-FALL AB ILL  I TY) 

Would  add  the  clause: 

( -CLAUSE -N  or  -HUMAN- TURING  or  FALL1BLE-TUR1NG) 

Which  can  be  more  intuitively  understood  as  (HUMAN=FALI  ADI LL I T Y -» 
(HUMAN-TURING  - FALLABLE-TURING)).  Clause-n  represents  the  TMS  node 
generated  to  represent  the  truth  value  of  the  clause  and  is  given  a 
true  valus  a9  a premise  uith  an  explanation  property  of  <reason>  as  in 
SET-TRUTH.  The  clause  node  is  useful  I both  in  generating  explanations 
and  in  removing  clauses  when  desired  (making  the  clause  node  false 
effectively  removes  the  clause).  The  clause  node  is  returned  as  the 
value  of  AOD=CLAUSE. 

DEFAULTS 

The  use  of  the  atom  ’DEFAULT  as  the  reason  argument  in  either 
SET-TRUTH  or  ADD-CLAUSE  has  a special  meaning.  It  is  the  way  in  which 
assumptions  are  announced  to  the  TMS.  A node  or  clause  given  a reason 
of  'DEFAULT  is  said  to  have  a default  truth  value.  Such  nodes  and 
clauses  act  just  like  any  other  untill  contradictions  appear.  If  any 
contradiction  can  ever  be  traced  to  a node  with  a default  value,  then 
the  value  for  that  node  will  be  automatically  retracted  by  the  TMS. 
Similarly  if  a contradiction  can  be  traced  to  a deduction  from  a clause 
with  a default  value,  then  the  clause  will  be  invalidated  and  the 
deduction  retracted.  This  is  the  way  in  which  this  TMS  handles  the 
non-monotonic  functions  performed  in  Doyle* 9 TMS  (Doyle  1978a). 

Notice  how  default  clauses  can  be  used  to  structure  assumptions. 
Suppose  for  example  that  you  want  to  assume  that  grocery  stores  have 
peas.  This  assumption  can  be  captured  in  a clause  which  represents  the 
implication  grogery-store  -*  has-pea9.  The  clause  would  be  given  a 
default  support  to  announce  that  it  i s an  assumption.  This  is 
described  in  more  detail  in  the  section  on  default  truth  values  and 
hierarchies  of  assumptions. 

If  it  i9  desired  not  to  have  the  TMS  do  automatic  backtracking 
then  the  assumptions  simply  need  not  be  announced  to  the  TMS. 


- I 


(REMOVE-TRUTH  <notle>) 

This  procedure  removes  the  truth  value  of  the  node  which  is 
passed  as  an  argument.  An  error  results  of  the  node  already  has  an 
unknown  truth  state.  All  truth  values  which  critically  depend  on  the 
removed  value  are  also  automatical  ly  removed.  At  the  end  of  the 
removal  process  nodes  whoes  truth  values  were  removed,  but  which  have 
default  values,  have  there  default  values  added  via  SET-TRUTH.  It  is 
important  to  realize  that  truth  values  which  can  be  duduced  from  other 
knowledge  in  the  TMS  will  not  be  removed.  Such  truth  values  can  only 
be  removed  by  removing  the  premises  or  clauses  from  which  it  can  be 
deduced.  Clauses  are  removed  by  removing  the  truth  value  of  their  TMS 
nodes. 


(UHY  <object>) 

<object>  may  be  either  a node  or 
con  trad i c t i on,  which  is  a clause  which 
first  consider  the  case  where  <object> 
procedure  returns  the  justification  for 


a clause  (more  specifically  a 
cannot  be  satisfied).  I will 
is  a node.  In  this  case  the 
the  belief  in  the  truth  value 


of  the  node.  If  the 
returned.  If  the  val 
’PREMISE  is  returned. 
truth  values  were  used 
node  of  the  supporting 


node  has  truth  state  of  unknown  then  nil  is 
I ue  of  the  node  is  a.premise,  then  the  atom 
Otherwise  it  returns  a list  of  the  nodes  whoes 
(o  deduce  the  truth  vaue  of  <node>.  The  clause 
clause  uill  appear  first  on  the  list.  Because 
of  the  internally  generated  clauses  which  result  from  the 
contradictions  it  is  possible  that  other  nodes  on  (his  Ii9t  are  clause 
nodes.  Clause  nodes  can  be  identified  in  that  there  ’ASSERTION 
property  is  the  atom  'CLAUSE. 

If  <object>  is  a clause  then  'Jhy  returns  a list  of  the  nodes 
contained  in  it.  The  clause  node  com  ;s  first.  It  is  important  to  note 
the  distinction  between  a clause  and  a clause  node.  The  former 
represents  the  actual  clauses  used  by  the  TMS  and  it  is  these  which 
appear  on  the  list  of  contradict  ions  described  below.  Clause  nodes  on 
the  other  hand  represent  the  vallidity  of  a clause  and  are  used  for  the 
recording  the  reasons  for  belief  in  clauses  and  for  removing  clauses  as 
described  above. 

UHY  can  be  used  to  do  dependency  directed  backtracking  outside  of 
the  TMS  in  cases  where  more  controle  over  the  choice  of  assumption 
removal  is  desired. 


All  contradictions  that  occur  in  the  TMS  are  placed  on  a list  which  is  the 


value  of  the  global  atom  CONTRA-LIST, 
the  CONTRA-LIST  will  have  value  nil. 
which  cannot  be  satisfied. 


If  there  are  no  contradict  ions  then 
A contradiction  is  simply  a clause 
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Appendix  II  — The  Data  Structures 

Nodes 

Nodes  represent  assertions  or  any  logical  items  that  take  on 
truth  values.  Nodes  are  represented  by  atoms  with  the  following 
proper  ties: 

TRUTH 

Thi9  properties  can  have  three  values,  ' true, ’ f a I se,  and 
'unknown,  which  represent  the  truth  state  of  the  node. 

SUPPORT 

This  property  gives  the  support  for  a truth  value  of  the 
node.  It  is  either  the  atom  'premise  or  a clause  if  the  node  has  a 
truth  value,  and  is  nil  if  the  node  h39  a truth  property  of 
’ unknown. 

POS-CLAUSES 

This  is  the  list  of  clauses  which  contain  the  node. 

NEG-CLAUSES 

This  is  a list  of  clauses  which  contain  the  negation  of  the 

node. 

MAKE-TRUE 

MAKE-FALSE 

MAKE-UNK 

These  are  optional  properties  which  give  functions  to  be 
applied  to  the  ASSERTION  property  when  the  node  undergoes  the 
appropriate  transition  of  truth  state. 

DEFAULT 

This  applies  only  to  nodes  that  have  default  truth  values  and 
is  either  'TRUE  or  'FALSE. 

ASSERTION 

This  is  the  assertion  external  to  the  TMS  that  the  node  is 
represent ing. 

EXPLANATION 

This  is  the  reason  for  believing  a node  which  19  a premise, 
e.g.  a node  which  was  set  true  or  false  for  reasons  external  to  the 
TMS. 

True  and  False 

'True  and  ’false  are  atoms  with  the  following  properties. 

TRUE 

OPPOSITE  ->  ’FALSE 
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CLAUSES  =>  ’POS-CLAUSES 
OP-CLAUSES  =>  'NEG-CLAUSES 
EFFECT  =>  ’ HAKE -TRUE 

FALSE 

OPPOSITE-  ->  'TRUE 
CLAUSES  ->  ’NEG-CLAUSES 
OP-CLAUSES  =>  ’POS-CLAUSES 
EFFECT  ->  'MAKE-FALSE 


Clauses  are  atoms  with  the  following  properties 
CLAUSE -LI  ST 

This  is  the  list  structure  which  contains  the  nodes  and 
associated  truth  values  which  make  up  the  clause.  It  is  a Ii9t  of 
dotted  pairs  each  of  which  is  a node  dotted  with  the  truth  value  it 
has  in  the  clause. 


PSAT 

This  is  the  number  of  nodes  which  either  satisfy  the  clause 
or  could  potentially  do  so.  If  this  number  is  1,  and  there  is  a 
node  with  an  unknown  truth  value  in  the  clause,  then  the  clause  can 
be  used  to  deduce  a truth  value  for  the  node.  If  this  number  is  0 
then  the  clause  is  a contradiction. 


Global  Variables 

CONTRA-LIST 

This  is  a list  of  all  the  clauses  which  are  contradictions. 

The  following  variables  are  global  to  certain  procedures  in  the  TMS. 

CONTRA-CLAUSE 

This  is  used  to  construct  the  new  clause  resulting  from  the 
appearance  of  contradictions.  It  is  global  to  the  internal  version 
of  SET-TRUTH. 

CONTRA-SOURCE 

This  is  the  contradiction  which  initialized  the  construction 
of  a new  clause.  It  is  used  by  the  internal  version  of  SET-TRUTH 
to  terminate  the  construction  of  the  new  clause. 

REMOVEO-LIST 

This  is  used  by  REMOVE-TRUTH  to  keep  track  of  nodes  whose 
truth  values  have  been  removed. 


— i 


ASSUn-LIST 


2U 


This  is  used  in  FIMD-ASSUM  for  accumulating  an  alist  of  the 
assumptions  underlying  a contradiction  associated  with  their 
maximum  distance  from  the  contradiction.  The  distance  to  the 
contradiction  is  the  number  of  clauses  in  the  link  betueen  the 
contradiction  and  the  assumption.  • 


I 

I 

i 

I 
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APPNOX  3 P«g«  1 


001  j INITIALIZATION  ROUTINES 

002 

003  (DECLARE  (SPECIAL  CONTRR-IIST  NOOE -COUNT  CTRRCE  VPRINT  RCCUfl 

004  CONTRfl-SDURCE  CONTRR-CLRUSE  RE/10 VEO-L  1ST  RSSU/1-L  1ST) ) 

oos 

006  (DEFUN  THS - INI T (> 

007  (PROG  () 

008  (PUTPROP  'TRUE  ’FALSE  ’OPPOSITE) 

009  (PUTPROP  ’TRUE  ’POS-ClfiUSES  ’CLAUSES) 

010  (PUTPROP  ’TRUE  ’NEG-CLRU3ES  ’OP-CLRUSES) 

011  (PUTPROP  'TRUE  ’DALE-TRUE  ’EFFECT) 

012  (PUTPROP  ’FALSE  ’TRUE  ’OPPOSITE) 

013  (PUTPROP  ’FALSE  ’NEG-CLAUSES  ’CLAUSES) 

014  (PUTPROP  ’FALSE  ’POS-CLAUSES  ’OP-CLAUSES) 

015  (PUTPROP  ’FALSE  'DALE-FAL SE  ’EFFECT) 

016  (SE TQ  CONTRA-LIST  NIL) 

017  (SETQ  C1RACE  NIL) 

018  (SETQ  VPRINT  NIL))) 

019 

020 

021  (DEFUN  DA) E-DEPENDENCY-NOOE  (ASSERTION  UHEN-TRUE  UHEN-FALSE  UHEN-UNLNOUN) 

022  (PROG  (NODE) 

023  (GENSYtl  ’N) 

024  (SETQ  NODE  (GENSYH) ) 

025  (INTERN  NOOE) 

026  (PUTPROP  NODE  ’UN) NOUN  ’TRUTH) 

027  (PUTPROP  NODE  NIL  ’SUPPORT) 

028  (PUTPROP  NODE  ASSERTION  ’ASSERTION) 

029  (PUTPROP  NOOE  UHEN-TRUE  ’DALE-TRUE) 

030  (PUTPROP  NOOE  UHEN-FALSE  ’DATE-FALSE) 

031  (PUTPROP  NOOE  UHEN-UNLNOUN  ’DALE-UNIC) 

032  (RETURN  NODE))) 


i 

I 
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013 
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016 

017 

018 

019 
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022 

023 

024 

025 

026 

027 

028 

029 

030 
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032 

033 

034 

035 

036 

037 

038 

039 
04  0 

041 

042 

043 

044 

045 

046 

047 

048 

049 

050 

051 


; CLOUSE  AOOITION  ROUTINES 

(OEFUN  AOO-CLAUSE  (CERUSE -LIST  PERSON) 

(RDQ-2  CERUSE-LIST  REASON) 

(BACKTRACK  > ) 

(DEFUN  ROO-2  (CLAUSE-LIST  REASON) 

(PROC  (CLAUSE  CLAUSE -NODE  COUNT) 

(SETQ  COUNT  0) 

(SETQ  CLAUSE-NODE  (MA) E -DEPENOENCY-NOOE  'CLAUSE  NIL  NIL  NIL)) 

(PUTPROP  CLAUSE-NODE  'TRUE  ’TRUTH) 

(PUTPROP  CLRUSE-NOOE  'PREMSE  ’SUPPORT) 

(PUTPROP  CLAUSE-NODE  REASON  ’EXPLANATION) 

(CONO  ((EO  REASON  ’DEFAULT) 

(PUTPROP  CLAUSE -NODE  ’TRUE  ’OEFAULT) ) ) 

(GENSYtl  ’C> 

(SETQ  CLAUSE  (CENSYM)) 

(INTERN  CLAUSE) 

(CONO  (C TRACE 

(PRINT  ’ |NEU-CLAUSE  |> 

(PR  INC  CLAUSE) 

(PR  INC  'I  |> 

(PRINC  REASON) 

(PRINT  (HAPCAR  (FUNCTION  (LAnBOA  (Ft 

(CONS  (CET  (CAR  F)  ’ASSERTION)  (COR  F>))> 

CL  RUSE -LIST)))) 

(SETQ  CLAUSE -LIST  (CONS  (CONS  CLAUSE-NODE  ’FALSE)  CLAUSE -LIST)) 

(PUTPROP  CLAUSE  CLAUSE -LIST  ’CLAUSE -LIST) 

(HAPC  (FUNCTION  (l RUBOR  (NODE) 

(CONO  {(NOT  (EQ  (CET  (COR  NODE)  ’OPPOSITE) 

(CET  (CAR  NODE)  ’TRUTH))) 

ISC  TO  COUNT  lit  COUNT)))))) 

CLAUSE -LIST) 

(PUTPROP  CLAUSE  COUNT  ’PSAT) 

(HAPC  (FUNCTION  (LAM80A  (NODE) 

(PUTPROP  (CAR  NODE ) 

(CONS  CLAUSE 

(CET  (CAR  NO OE)  (CET  (COR  NOOE)  ’CLAUSES))) 
(CET  (COR  NOOE)  ’CLAUSES)))) 

CLAUSE-LIST) 

(CONO  ((*  COUNT  0) 

(SETQ  CONTRA-LIST  (CONS  CLAUSE  CONTRA-LIST)))) 

(PROG  (CONTRA-SOURCE  CONTRA-CLAUSE  I 
(OEOUCE -CHECK  CLAUSE)) 

(RETURN  CLAUSE-NODE))) 
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(TRUTH  VRIUE  ROOITION  ROUTINfS 

(OEFUN  SET-TRUTH  (RODE  VRIUE  EXPIRN) 

(PROG  (CONTRA  SOURCE  CONTRA  CIRUSE) 

(PUTPROP  NOOE  EXPIRN  ’EXPLANATION) 

(CONO  ( ( E Q EXPLRN  'OET  RULT)  (PUTPROP  NOOE  VALUE  ’DEFAULT) ) ) 

(SET-2  NOOE  VRIUE  ’ PREMISE ) 

(8ACI TRRCFl)) 

(DEFUN  SET-2  (NOOE  VRLUE  SUPPORT) 

(PROG  (TRACE  F) 

(CONO  (VPR1NT  (PRINT  * | SE T TRUTH | ) (PR1NC  NOOE)  (PRINC  VALUE)  (PRINC  SUPPORT))) 

(TRACE  IS  TRUE  IF  fl  CONTRADICTION  HAS  RESULTED  FROd  THIS  SET,  EITHER  DIRECTLY 
;0R  AS  A CONSEQUENCE  Or  RESULTING  RECURSIVE  DEDUCTIONS 

(SE TO  TRACE  NIL) 

(CONO  ((NOT  (EQ  (GET  NOOE  ’TRUTH)  ’UNTNOUN)) 

(ERROR  ’SET-TRUTH  VALUE-NOT-UNTNOUN  NODE))) 

(PUTPROP  NODE  VRIUE  ’TRUTH) 

(PUTPROP  NOOE  SUPPORT  ’SUPPORT) 

(HAPC  (FUNCTION  (( AfIROA  (Cl RUSE  I (PROG  () 

(PUTPROP  CLAUSE  (1-  (GET  CLAUSE  ’PSAT) ) ’PSAT) 

(CONO  ((.  (GET  CIAUSE  ’PSAT)  0) 

(SETO  CONTRA  LIST  (CONS  CIAUSE  CONTRA-LIST)) 

(CONO  (C TRACE 

(PRINT  ’CONTRADICTION) 

(PRINC  (GET  CLAUSE  ’CLAUSE -L 1ST) ))))))) ) 

(GET  NOOE  (GET  VALUE  ’ OP  Cl  RUSES) ) ) 

(CONO  ((GET  NOOE  (GET  VALUE  ’EFFECT)) 

(APPLY  (GET  NODE  (GET  VALUE  ’EFFECT))  (LIST  (CET  NOOE  ’ASSERTION))))) 

(I1APC  (FUNCTION  (LAtlBDA  (CLAUSE) 

(CONO  ((AND  TRACE 

(EO  CIAUSE  CONTRA-SOURCE)) 

(A00-2  CONTRA-CLAUSE  ’CLAUSE-RESOLUTION) 

(SETO  CONTRA-SOURCE  NIL) 

(SETQ  TRACE  NIL)) 

((AND  (e  (GET  CLAUSE  ’PSAT)  •> 

(NULL  CONTRA-SOURCE)) 

(SETQ  CONTRA-SOURCE  CLAUSE) 

(SETQ  CONTRA-CLAUSE  (dERGE  CLAUSE  NIL  NOOE  NIL)) 

(SETQ  TRACE  ’TRUE)) 

((SETQ  F (DEOUCE-CHECK  CLAUSE)) 

(SETO  TRACE  ’TRUE) 

(SETQ  CONTRA-CLAUSE 

(TIERCE  CLAUSE  CONTRA-CLAUSE  NOOE  (CAR  F)>>>))> 

(GET  NOOE  (GET  VALUE  ’OP-CLAUSES))) 

(RETURN  TRACE))) 

(DEFUN  OEOUCE-CHECK  (CLAUSE)  5 THE  FACT  DEOUCEO  IS  RETURNEO  ONLY  IF  A CONTRADICTION  RESULTEO. 
(PROG  (F) 

(CONO  ((AND  («  (GET  CLAUSE  ’PSAT)  1) 

(SETQ  F (PCONSEQ  CLAUSE)) 

(SET-2  (CAR  F)  (COR  F)  CLAUSE)) 

(RETURN  F > ) 

(T  (RETURN  NIL))))) 

(DEFUN  PCONSEQ  (CLAUSE) 

(00  CL  1ST  (GET  CLAUSE  ’CLAUSE -L 1ST)  (COR  CLIST) 

(NULL  CLIST) 

(CONO  ((EQ  (GET  (CAAR  CLIST)  ’TRUTH)  ’UNFNOUN) 

(RETURN  (CAR  CLIST)))))) 

(DEFUN  dERGE  (CLAUSE  ACCUd  EXCEPT!  EXCEPT2) 

(PROG  () 

(HAPC  (FUNCTION  (LAHBOA  (NOOE) 

(CONO  ((NOT  (OR  (EQ  (CAR  NOOE)  EXCEPT1) 

(EQ  (CAR  NODE)  EXCEPT2) 

(HEdBER  NOOE  ACCUd))) 

(SETQ  ACCUd  (CONS  NOOE  ACCUd)))))) 

(GET  CLAUSE  ’CLAUSE -LIST)) 

(RETURN  ACCUd))) 
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; TRUTH  VRLUE  REMOVAL  ROUTINES 

(DEFUN  REMOVE-TRUTH  (NODE) 

(PROC  (REMOVED-LIST) 

(REMOVE -2  NODE) 

(HRPC  (FUNCTION  (LRMBOfi  (DOT) 

(PROC  (NODE) 

(SETQ  NOOE  (CAR  UOT>) 

(CONO  ((NOT  (EO  (GET  NODE  ’TRUTH)  ’UNKNOUN))  (RETURN  T>>> 

(NOOE -DEOUCE -CHECK  NOOE  ’TRUE) 

(NOOE -DEOUCE -CHECK  NOOE  ’FALSE)))) 

REMOVED-LIST) 

(nAPC  (FUNCTION  (LAMBDA  (DOT) 

(PROG  (NODE) 

(SETQ  NOOE  (CAR  OOT) ) 

(CONO  ((NOT  (EQ  (GET  NOOE  ’TRUTH)  ’UNKNOUN))  (RETURN  T)>) 

(CONO  ((GET  NOOE  ’OEFRULT) 

(PROG  (CONTRA-SOURCE  CONTRA-CLAUSE) 

(PUTPROP  NOOE  ’DEFAULT  ’EXPLANATION) 

(SET-2  NOOE  (GET  NOOE  ’DEFAULT)  ’PREMISE) ))))) ) 

REMOVED-LIST))) 

(OEFUN  REHOVE-2  (NOOE) 

(PROG  (VALUE) 

(CONO  (VPR1NT  (PRINT  ’ | RE HOVE -VALUE  |> 

(PR INC  NOOE))) 

(SETQ  VALUE  (GET  NODE  ’TRUTH)) 

(CONO  ((EQ  VRLUE  'UNI  NOUN) 

(ERROR  'REMOVE-VALUE— VALUE -NOT-PRESENT  NODE))) 

(PUTPROP  NOOE  ’UNI  NOUN  ’TRUTH) 

(PUTPROP  NOOE  NIL  ’ SUPPORT > 

(SETQ  REMOVED-LIST  (CONS  (CONS  NOOE  VALUE)  REMOVED-LIST)) 

(MAPC  (FUNCTION  (LAMBDA  (CLAUSE)  (PROG  () 

(PUTPROP  CLAUSE  <W  (GET  CLAUSE  ’PSAT)>  ’PSAT) 

(CONO  ((=  (GET  CLAUSE  ’PSAT)  1) 

(SETO  CONTRA-LIST  (OELO  CLAUSE  CONTRA-L 1ST) ) ) > > ) ) 

(GET  NOOE  (GET  VALUE  ’OP-CLAUSES))) 

(CONO  ((GET  NOOE  ’MAIE-UNK) 

(APPLY  (GET  NOOE  ’MAIE-UNK)  (LIST  (GET  NOOE  ’ASSERTION))))) 

(MAPC  (FUNCTION  (LAMBDA  (CLAUSE)  (PROG  (F) 

(CONO  ((AND  (>  (GET  CLAUSE  ’PSAT)  1) 

(SETQ  F (CAR  (CONSEQ  CLAUSE))) 

(EQ  CLAUSE  (GET  F ’SUPPORT))) 

(REHOVE-2  F)>>)>) 

(GET  NOOE  (GET  VALUE  ’OP-CLAUSES))))) 

(DEFUN  CONSEQ  (CLAUSE) 

(DO  CLIST  (GET  CLAUSE  ’CLAUSE -LIST)  (COR  CLIST) 

(NULL  CLIST) 

(CONO  ((EQ  (GET  (CAAR  CLIST)  ’TRUTH)  (COAR  CLIST)) 

(RETURN  (CAR  CLIST)))))) 

(OEFUN  NOOE-DEDUCE-CHECK  (NOOE  VALUE) 

(PROC  (CONTRA-SOURCE  CONTRA-CLAUSE) 

(00  C-L 1ST  (GET  NOOE  (GET  VRLUE  ’CLAUSES))  (COR  C-LIST) 

(OR  (NULL  C-LIST) 

(EQ  (GET  NOOE  ’TRUTH)  VALUE)) 

(OEOUCE -CHECK  (CAR  C-L 1ST) > > ) > 
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(EXPLANATION  AND  BRCrTRACMNG  ROUTINES 


(DEFUN  WHY  (OBJECT) 

(PROC  (SUPPORT  CL  1ST  WHY-LIST) 

(CONO  ( (SE  TO  CL  1ST  (GIT  OBJECT  ’CLOUSE -L 1ST) ) 

(RETURN  (MRPCRR  (FUNCTION  (LRtIBDR  (F ) (COR  F>>>  CL  1ST)  > » 

(T 

(SETQ  SUPPORT  (GET  OBJECT  ’SUPPORT)) 

(CONO  ( (EO  SUPPORT  ’PREMISE)  (RETURN  ’PREMISE)) 

(T  (00  CL  1ST  (GET  SUPPORT  ’CLRUSE-L1ST)  (COR  CLIST) 

(NULL  CLIST' 

(CONO  ((NOT  (EO  (CRRR  CLIST)  OBJECT)) 

(SETQ  WHY-LIST  (CONS  (CflRR  CLIST)  WHY-L 1ST) ) ) > ) 
(RETURN  WHY-LIST))))))) 


(DEFUN  BACITRRCF  () 

(PROG  (ASSUMPTION  ASSUMUST) 

(SETQ  ASSUMPTION  NIL) 

(SETQ  RSSUM-LIST  Nil) 

(CONO  ((NULL  CONTRR-L 1ST) 

(RETURN  T>>> 

(DO  CONTRR  CONTRR-L 1ST  (COR  CONTRA) 

(OR  (NOT  (NULL  RSSUM-LIST)) 

(NULL  CONTRR)) 

(MRPC  (FUNCTION  (LflMBDR  (NOOE)  (FINO-RSSUM  NODE  1))) 

(WHY  (CRR  CONTRR)))) 

(00  ( (OO-RSSUM  RSSUM-LIST  (COR  DO-RSSUM)) 

(MIND  1000  MIND)) 

((NULL  OO-RSSUM)) 

(CONO  (<«  (CUflR  OO-RSSUM)  M1N0) 

(SETQ  MINO  (CORR  OO-RSSUM)) 

(SETQ  ASSUMPTION  (CRRR  OO-RSSUM))))) 

(CONO  ((NULL  ASSUMPTION) 

(PRINT  ’ I CONTRADICTION  OEPENOS  ON  NO  RSSUMPT IONS | ) 

(RETURN  NIL)) 

(T  (REMOVE-TRUTH  ASSUMPTION))) 

(BfiCF  TRRCF ) ) ) 

(OEFUN  FINO-RSSUM  (NODE  LEVEL) 

(PROG  (SUPPORT  RSSC) 

(SETQ  SUPPORT  (GET  NOOE  ’SUPPORT)) 

(CONO  ((EQ  SUPPORT  ’PREMISE) 

(CONO  ((EQ  (GET  NODE  ’EXPLANATION)  ’OEFRULT) 

(CONO  ((SETQ  RSSC  (RSSOC  NOOE  RSSUM-LIST)) 

(RPLflCD  RSSC  (MRX  LEVEL  (COR  RSSC)))) 

(T  (SETQ  RSSUM-LIST  (CONS  (CONS  NOOE  LEVEL)  RSSUM-LIST) )))))) 
(T  (MRPC  (FUNCTION  (LRMBDR  (NOOE) (FINO-RSSUM  NOOE  <1*  LEVEL)))) 

(WHY  NOOE  >))>>> 


(OEFUN  SATISFY  (NODES) 

(MRPC  (FUNCTION  (LRMBOH  (NOOE) 

(CONO  ((NOT  (EQ  (GET  NOOE  ’TRUTH)  ’ UNKNOWN) ) 
(PUTPROP  NOOE  ’TRUE  ’OEFRULT)) 

(T  (SET-TRUTH  NOOE  ’TRUE  ’OEFRULT))))) 

NODES)) 
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